httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Daniel <dferra...@gmail.com>
Subject Re: [users@httpd] apache 2.4 allow by IP
Date Fri, 20 Mar 2015 07:59:40 GMT
2015-03-20 1:06 GMT+01:00 Tim Dunphy <bluethundr@gmail.com>:

> Do you also have the corresponding LoadModule directives in your config
>> file?
>> (shared modules need it to be effectively loaded).
>
>
> Affirmative:
>
> [root@uszwsls00015la apache2]# egrep "status_module|authz_host"
> conf/httpd.conf
> LoadModule authz_host_module modules/mod_authz_host.so
> LoadModule status_module modules/mod_status.so
>
> Thanks,
> Tim
>
> On Thu, Mar 19, 2015 at 7:57 PM, Yann Ylavic <ylavic.dev@gmail.com> wrote:
>
>> On Thu, Mar 19, 2015 at 9:51 PM, Tim Dunphy <bluethundr@gmail.com> wrote:
>> >> mod_status loaded?
>> >
>> >
>> > Yep!
>> >
>> > [root@uszwsls00015la apache2]# apachectl -M | grep status
>> >  status_module (shared)
>> >
>> > And so are mod_authz_host:
>> >
>> > [root@uszwsls00015la apache2]# apachectl -M | grep authz_host
>> >  authz_host_module (shared)
>>
>> Do you also have the corresponding LoadModule directives in your config
>> file?
>> (shared modules need it to be effectively loaded).
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>>
>
>
> --
> GPG me!!
>
> gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B
>
>
Do not define <VirtualHost *> define it like <VirtualHost *:80>
Change <Directory /*> to point to your exact documentrootpath and then set
AllowOverride none.

Also use apachectl -S to check and make sure your virtualhosts are defined
correctly.



And now the most important thing, the log:
[Thu Mar 19 13:22:34.274686 2015] [authz_core:error] [pid 56979:tid
140005409228544] [client216.178.108.232:63636] AH01630: client denied by
server configuration: /opt/apache2/htdocs/hcphp.nbc.com/server-status

Here it says you are reaching your server with IP 216.178.108.232, and you
have "Require ip 10.10.10.5". It will never let you in, even if you land in
the correct context.



-- 
*Daniel Ferradal*
IT Specialist

email         dferradal@gmail.com
linkedin     es.linkedin.com/in/danielferradal

Mime
View raw message